4 ms·
I think it's spectacularly naive to assume LibreSSL will be widely adopted beyond FreeBSD just because it's a cleaner codebase.
by remon 12y ago
I think it's spectacularly naive to assume LibreSSL will be widely adopted beyond FreeBSD just because it's a cleaner codebase.
- clarry 12y agoJust because. What if it also had fewer bugs, is more receptive to contributed bug fixes, runs clean in Valgrind, etc.?
- midas007 12y agoThe point of LibreSSL is to be a potential competitor and an apparent existential threat to scare OpenSSL into getting its house in order.
- clarry 12y agoI don't think that's the point. I think OpenBSD devs just want secure code, and they get it by doing the work. So that's what they do. No hidden agendas.
- nayden 12y agoIf this fork makes OpenSSL developers be more responsive to patch fixes and have them improve their documentation it's a win for OpenSSL and their users at large. OpenBSD is already reaping the benefits from a better TSL implementation in -current so it's a win for our project as well. This is a win win scenario.
- midas007 12y agoExactly. When a popular security project has no clear competition, a code "monopoly" may exist and it's much easier to get complacent. By introducing "competition," it tends to keep both projects adversarial and vigilant... which is exactly what a security project needs.
- nayden 12y agoThe primary goal of LibreSSL is to fix the OpenSSL codebase for OpenBSD. If other communities like the changes there could be a portable versions as alluded by the LibreSSL web site. Think OpenSSH -> OpenSSH-portable.